People. Who. Aren't. Good. With. Technology. Deserve. Security. And. Privacy. Too.
@JessTheUnstill Are there people who disagree with this take? 
@JessTheUnstill also even if you are techy not everyone wants to self host all their shit or pay a ridiculous up charge to pay for something that could just be privacy theater. The only proper way of doing things is proper regulations.
@arctic
A lot of DDoS and other attacks come from people self-hosting their shit because they think they understand security. Many of them have security effective against script kiddies but are easy pickings for those with unpublished exploits because they don't know how to analyze their logs for evidence they were attacked or compromised by an unknown zero day.
@JessTheUnstill
@SocialJusticeHeals @JessTheUnstill yeah unfortunately self hosting is not as easy to do properly as some people make it out to be
@JessTheUnstill @gentlyepigrams We have to be really careful to avoid accidentally putting a code-to-open, MFA, or TouchId on my mother-in-law’s iPhone. She already want to ditch it, but it’s still too useful. She just doesn’t learn things at the age of 91 that she has absolutely no interest in.
@sydpolk @JessTheUnstill @gentlyepigrams
I spent a lot of effort to try to teach my dad how to use a cellphone as his health was declining and he still never used it. I can see why you'd want to make sure she doesnt just stuff the iphone in a drawer to forget about it.
@Hawkwinter @sydpolk @JessTheUnstill @gentlyepigrams My grandpa, who passed away a few years ago, was actually pretty good about learning new technologies but never quite internalized the idea that you are supposed to take your cellphone with you whenever you leave the house.

@MisuseCase

My Dad never really understood that you're supposed to leave the phone turned on even when you aren't expecting a call, and you don't turn it off every time you hang up.

@Hawkwinter @sydpolk @JessTheUnstill @gentlyepigrams

@JessTheUnstill Okay. But at that rate they’re gonna run out of periods.
@JessTheUnstill It is an all or nothing deal

@JessTheUnstill

I'm not great at tech. But oh my Gods, I can cook.

So it is also a matter for people who aren't old and just have their skills elsewhere. You can trust me not serve you unsafe fermented foods. I want to be able to trust my computer not to put me on a list of inconvenient queers to be eliminated.

@Noricenolife @JessTheUnstill cook me up some good pasta and I'm your technician forever!

@JessTheUnstill I read this in Derek Zoolander's voice, but you're not wrong.

The center for kids for kids who can't read Goodland wanna learn to do other stuff good too.

@JessTheUnstill and they deserve #TechLiteracy and easy tools, too...

Luckily, the situation has become easier over time...

@JessTheUnstill

Right? Otherwise it's like saying people who aren't professional drivers don't deserve seat belts, air bags and anti-lock brakes.

@JessTheUnstill maybe more, since we feel absolutely *boned*(and not the fun kind) when it comes time to clean up the mess we didn't start.
@JessTheUnstill serious problem. Security doesn't work if it is harder to execute than the underlying technology
@JessTheUnstill and they don’t deserve to be treated like shit by the security ‘experts’

@JessTheUnstill

And one of those people might be them in the future, no matter how technical they are now.

@JessTheUnstill
💯% accurate.

In fact if the technologically illiterate don't have security and privacy, then no one has it.

@JessTheUnstill It is unfortunately the case that security and convenience are often "allergic" to each other. The *more* you make a technology secure, the *less* convenient it (usually) gets to use it. Once in a while a nerd-Titan like Moxie Marlinspike comes along and defies this pattern by coding for WhatsApp or Signal. But the general pattern remains: convenience and security are usually allergic to each other. Please don't impute intention - that there was *necessarily* malice.

@sbb @JessTheUnstill >> It is unfortunately the case that security and convenience are often "allergic" to each other.

I used to take this as a given but I’ve seen so many cases where organizations put the burden of security on their users (customers or, more often, employees) when it wasn’t absolutely necessary to do so.

@MisuseCase

Agreed. One common way they do this is by choosing insecure defaults, which most people never change.

@sbb @JessTheUnstill

@JessTheUnstill I'm 40 years into a database app/sys admin career. I *need* help with privacy and security.

Used to be that you could disconnect the one Telco cable from the modem and know that you didn't need to worry about external miscreants on your network. You just had to worry about the dumbasses pressing buttons on keyboards in your building.

I used to love appearing in some executive's office doorway after they'd done something that validates the Peter Principle. A 23yo grunt w power!

@JessTheUnstill that is hardly possible in the current system and how the internet is driven today !!
@JessTheUnstill I turned this over in my head a few times and I think you're not in touch. We do need better consumer protections so it isn't such a pain in the ass to maintain your privacy, but it's not that complicated. People trade convenience for privacy all the time and I try to educate people about it and most do not even want to learn - its not worth their effort. Tech companies know that, so they play on people's laziness. At the end of the day some of the blame does fall on the lazy.
@drewt00 @JessTheUnstill Fair enough, but does it HAVE to be so much extra work to be private/secure? Why are we blaming folks for not wanting to play the 'which JavaScript component I blocked is making the page not load' game everytime they click on a link? I operate in this manner everyday and it's tiresome. My computer is the only tool I own that is designed to constantly work against my wishes. We should be shifting blame to those who designed their systems like this.
@drewt00 @JessTheUnstill how many people don’t even look their phones with a passcode or use something like 00000 or 12345 they even to lazy to set up Face or Touch ID on their iPhones or they think for some reason 00000 is more secure then those options? And how many people use outdated smartphones because they still work? As long massaging works everything is fine they just complain when WhatsApp ends the support of their old Android version
@JessTheUnstill @ctp I'm not sure it's possible to provide decent privacy to people who confirm every dialog box.

@egorFiNE @JessTheUnstill @ctp People do this because they get presented with a bunch of crap on the way to doing what they actually want/need to do. They get the equivalent of red tape instead of meaningful, comprehensible notifications and choices.

So yes, of course people are going to click through every dialog box, because 99% of them are meaningless formalities on the way to whatever the user’s goal is.

@JessTheUnstill yeah, ultimately governments need to step up and enshrine the right to digital privacy in their constitutions imo
@JessTheUnstill seems like a lost battle you can create and sell an illusion of it and sell it well
@JessTheUnstill
Agreed! The "people just don't care about privacy" argument is blaming and really bothers me.

@JessTheUnstill They deserve it to be built into the tech and systems that they get out of the box, for free, instead of needing a pricy security system for their computer.

People who struggle to understand tech are also the most prone to falling into the traps that scammers and phishers set, too.

@JessTheUnstill So true. It's a never-ending challenge to make privacy and security both easy and effective, but that doesn't mean we shouldn't try!

@JessTheUnstill We need to work out good law and group negotiating strategies to enforce dignity and empowerment of the common person.

As a tech expert I can fashion locks and plan strategies that a very well trained person *might* use to thwart attack, but these only treat symptoms and not the root problem. 😢

@JessTheUnstill Arguably moreso, the more technically minded people can make a more informed decision about what the risks are and if they make sense in a given situation.

@JessTheUnstill

Just trying to help a non-techy friend with a very badly compromised laptop. Grim.

@JessTheUnstill Except racists, bigots & nazis… burn them all.
@camstonefaux @JessTheUnstill
Exceptions made to go after the extreme right will be used against the middle-left. It's not an easy balancing act, and intrusions should get case-by-case scrutiny.
@Verdigris @JessTheUnstill I’m 110% fine with going after nazis pedos. F’ em. If the left are sh*t, tough beans.
@JessTheUnstill They aren't getting it though. They should. But they won't. Because right now getting security and privacy requires a certain level of technical skill. There have been attempts to fix this, but it always means trading off some usability and convenience. Plus most people are happy to give up a lot of privacy in return for the benefits of social media.
@JessTheUnstill they should be the main target for every kind of protection.
@JessTheUnstill This is just a magnificent formulation of such a fundamental issue.
Now weeks later, I find myself thinking about it.
@JessTheUnstill unfortunately most people don’t care about security how many People just look their phones with a 000000 or 12345 passcode. How many use outdated Android phones with Android 7 or 8 that haven’t got any Security Patches and updates in 5 years and still use them because they still work? How many use online banking on those smartphones? How many install those fake postal tracking apps where they get the link send over SMS / WhatsApp or Mail?
@JessTheUnstill Can I get this carved on a baseball bat or 2x4 that I can…share with certain people here on Mastodon?
@JessTheUnstill As Franklin famously said, “Those who would give up essential Privacy, to purchase a little temporary Likes, deserve neither Privacy nor Likes,” or something like that.
@JessTheUnstill 🎧👏👏👏👏

@JessTheUnstill

With other words: The other 99% of the society. Pity they don’t demand it.

@JessTheUnstill
In my experience people who aren't good with technology don't realise they don't have security and privacy. And are resistant to hearing about it because it's too complicated.
@JessTheUnstill one of my biggest gripes is when people say “just get more tech literate” & then when people who aren’t educated ask to be educated, the former crowd suddenly disappears